Here is the python version - requires python pexpect module: #!/usr/bin/python # # Eric Garnel Sept 18 2018 # # free to use, modify as needed # Use at your own risk, discreation, etc. # Usage - wlc-auto-rf.py ip-fof-wlc username password band <802.11b 802.11a 802.11-abgn> <name of AP> <output file> # requires python pexpect module # import pexpect import sys firstarg=sys.argv[0] address=sys.argv[1] username=sys.argv[2] password=sys.argv[3] radio=sys.argv[4] apname=sys.argv[5] output=sys.argv[6] child = pexpect.spawn ('ssh' , [address]) child.expect ('User:') child.sendline (username) child.expect ('Password:') child.sendline (password) child.expect ("Controller") child.sendline ('config paging disable') # child.expect ("Controller") child.sendline ('show ap auto-rf '+radio+' '+apname) child.logfile = open(output , "w") child.expect ("Controller") child.sendline ('logout') child.expect('(y/N)') child.sendline ('N') child.expect(pexpect.EOF) ... View more

Richard,   Thanks for the info. Waiting to kill off a 1550 before I can move past 8.5. Also, does the functionality allow the ability to pass variables such as client Mac-addresses or AP names? I wrote the script specifically for dynamic variables such as client details or AP auto-rf (other script to be posted soon) ... View more

I will also add a filter howto guide soon. ... View more

Is the Wi-Fi network you are sniffing encrypted?  If so, you will not see the ip level details without importing the keys.  This is possible in Wireshark, but not with the airportd command ... View more

Hard to say without more detail,  but out of curiously... when you say different WLAN... and I look at the debugs.  I wonder if the client is trying to change SSIDs.  If so, do you have Fast SSID change enabled? ... View more

And for IOS NAT too   Command line entry Router(config)#ip nat portmap NTP Router(config-ipnat-portmap)#appl udp-rtp startport 1024 s Router(config-ipnat-portmap)#appl udp-rtp startport 1024 size ?   <64-65536>  size   Router(config-ipnat-portmap)#appl udp-rtp startport 1024 size 65536 Router(config)#exit   Router(config)#ip nat inside source list 10 interface GigabitEthernet0/0 overload portmap NTP <this would change based on interface or pool of addresses> Router(config)#end Router(config)#do wr ... View more

5. KNOWN WORK-AROUNDS:  Cisco ASA operating system version 8.4(2) supports the use of the “FLAT” configuration keyword. Using this keyword allows firewall administrators to change the default range in which port randomization occurs.  USE WITH NTP:  Use the “FLAT” keyword to change the NTP source port randomization range from 0-1023 to 1024-65535.  FURTHER READING:  http://www.netcraftsmen.com/dynamic-pat-cont-with-pools-flat-round-robin-and-extended-pat/ ... View more

The WLC CLI has a certain syntax you need to incorporate into your script.  I typically write scripts for bash shell (Linux, etc) so I'm not certain how to craft it for windows.  I expect the command syntax would be similar. Here is a support forum link to WLC scripting example  https://supportforums.cisco.com/document/141606/automating-run-config-output Eric ... View more

It sounds like a coverage issue with the RSSI power balance between 5 and 2.4   or a combination of band select and aggressive load balancing settings on the controller Have you read up on Ciscos' recommendation for Apple devices? Enterprise Best Practices for Apple Mobile Devices on Cisco ... Check out the troubleshooting section. You can compare the details to a debug client <mac address> on the controller Also,  have you performed a packet capture to see what is happening at the management layer?   ... View more

Totally agree with Megasmithers. This is very confusing. Maybe the box should say "yes" or "no" ... View more

The segment the internal services are on needs to be routable to/from the segment/scope given to your  VPN users.   You also need to make sure there are NAT rules for the VPN address scope/segment as you are using full tunnel ... View more